TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the filename parameter in /setting/setUpgradeFW...

PT-2022-3184

Name of the Vulnerable Software and Affected Versions IntelR Boot Guard and IntelR TXT affected versions not specified Description The issue is related to the implementation of IntelR Boot Guard and IntelR TXT technologies in IntelR processors, which may allow an unauthenticated user to potential...

CVE-2022-28912: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUpgradeFW...

CVE-2022-28913: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUploadSetting...

CVE-2022-28910: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName...

CVE-2022-28909: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

CVE-2022-28906: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg...

CVE-2022-28911: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/CloudACMunualUpdate...

CVE-2022-28908: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the ipdoamin parameter in /setting/setDiagnosisCfg...

CVE-2022-28905: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass

Overview Screen Creator Advance2 provided by KOYO ELECTRONICS INDUSTRIES CO., LTD. is a screen development tool for KOYO ELECTRONICS's HMI. Screen Creator Advance2 contains an authentication bypass vulnerability CWE-807 due to the improper check for the Remote control setting's account names. KOY...

Exploit for Code Injection in Mybb

CVE-2022-24734 PoC An RCE can be obtained on MyBB's Admin CP...

CVE-2022-28972

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

PT-2022-3366

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.196318 Description The issue is related to a stack-based buffer overflow vulnerability in the form fast setting wifi set function of the Tenda AC18 router's firmware. This vulnerability is caused by an out-of-bounds...

PT-2022-19335

Name of the Vulnerable Software and Affected Versions Tenda AX1806 version 1.0.0.1 Description The issue is related to a stack overflow via the timeZone parameter in the form fast setting wifi set function, allowing attackers to cause a Denial of Service DoS. Recommendations For Tenda AX1806...

Internet Bug Bounty: rubygems.org Batching attack to `confirmation_token` by bypass rate limit

The following is copied from hackerone's report. https://hackerone.com/reports/1529183 --- I confirmed that EmailConfirmationsController has the same problem as https://hackerone.com/reports/449356...

SeaCMS 安全漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 11.6, which stems from the discovery of a Remote Command Execution RCE vulnerability containing a...

CVE-2022-28560

There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

PT-2022-19079

Name of the Vulnerable Software and Affected Versions Tenda ac9 version 15.03.2.21 cn Description The issue is related to a stack overflow vulnerability in the goform/fast setting wifi set function within the httpd service. This vulnerability allows an attacker to obtain a stable shell through a...

CVE-2022-29444

Plugin Settings Change leading to Cross-Site Scripting XSS vulnerability in Cloudways Breeze plugin = 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wpajax actions in the class BreezeConfiguration which includes the ability to change any of the plugin'...